[Zope] Security Question

Dear Sir,Madam, I Do not really understand all These security buttons. I want to make a collection of users that access a special form from the web. For example http://localhost:9673/UploadForm. They need to pass a PASSWORD question, but they never can access the DTML code that generates the form code or any other Zope management screens. How do I organise It. Are there any references in the Mailinglist???? Wim Vanroose